Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
File: 8H-pjVIdhMKNrsion3SIu86AAhU.mft (raw, json)
Hash identifier: XqGjwIzl7qbV7AuNivqG2oajeSFG5ml2pJjI3Pm/yww=
Subject key identifier: 38:55:C6:6B:A0:D0:59:B0:8C:69:B5:FF:B8:AC:76:53:62:81:80:79
Authority key identifier: F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
Certificate issuer: /CN=f07fa98d521d84c28daec8a89f7488bbce800215
Certificate serial: 01A0EF304719C4D309DFD31E19133BEC85B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
Manifest number: 06A3
Signing time: Tue 29 Sep 2026 22:01:53 +0000
Manifest this update: Tue 29 Sep 2026 22:01:53 +0000
Manifest next update: Wed 30 Sep 2026 22:01:53 +0000
Files and hashes: 1: 8H-pjVIdhMKNrsion3SIu86AAhU.crl (hash: TvYHoplZic8dqkLZMRmTAfonf/on+mvCSZNF79CMDEI=)
2: 8_gr7ArTRAbIwtF4BAs2Yb1Q5X8.roa (hash: mNo3tCakCblgrlbHW+icbibgZLAMJGmCUvTiUz7GkBc=)
3: i75q_zMVNaia1zcfmMS3-MtcBh0.asa (hash: AViSc0D9y0lScSoevl+dGPay5IerujbH9Kjp2UJ8v7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 22:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:30:47:19:c4:d3:09:df:d3:1e:19:13:3b:ec:85:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f07fa98d521d84c28daec8a89f7488bbce800215
Validity
Not Before: Sep 29 22:01:53 2026 GMT
Not After : Sep 30 22:01:53 2026 GMT
Subject: CN=3855c66ba0d059b08c69b5ffb8ac765362818079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:ed:61:ec:96:44:58:45:4e:15:89:8e:92:
7a:94:60:1d:f0:6f:ab:fd:dd:ca:87:56:0b:62:ff:
36:a4:f7:bd:4c:52:6d:4d:3e:1e:09:57:b9:85:b4:
e6:a6:1c:92:8c:52:8b:94:a9:d4:44:dc:c9:ce:29:
62:2b:6a:0e:4d:7e:69:c1:4a:ff:ea:34:00:fc:93:
39:6d:1d:a2:56:95:24:89:c2:ed:b9:07:a7:dc:98:
d9:eb:8c:c4:c2:e8:d7:03:6b:ca:d0:55:da:60:ac:
b9:84:15:bb:6e:e5:51:55:e3:72:46:89:f5:25:84:
90:49:f8:39:b1:4e:b2:e6:04:77:26:51:d6:5b:7a:
32:75:b9:6d:28:a5:16:dc:3f:a2:74:04:a4:6c:fd:
3a:dc:54:9f:38:bf:1a:22:ec:bf:78:ec:d1:39:98:
2a:34:f3:04:f3:30:b6:bb:6f:2e:17:a7:2a:89:ca:
6a:c2:0f:f9:cd:e2:69:d9:bd:37:67:50:1e:5b:9f:
2b:bd:eb:73:d0:ff:e3:84:33:4c:5b:df:87:ad:7c:
a0:1b:ce:7d:2c:1c:0c:de:d4:eb:04:5f:f9:5f:dd:
48:70:f1:0a:ac:72:b0:fb:48:c5:16:b3:d9:6a:88:
d8:a8:a4:5c:ea:7e:1c:ee:b3:7e:84:8d:aa:d8:3b:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:55:C6:6B:A0:D0:59:B0:8C:69:B5:FF:B8:AC:76:53:62:81:80:79
X509v3 Authority Key Identifier:
keyid:F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ba:29:ac:c8:c0:ea:fa:c3:95:ad:e6:41:1b:80:42:fc:6e:
50:64:a6:9b:0c:2d:2f:f6:7c:d7:a3:63:4e:55:d7:f9:25:01:
bf:8a:b5:dc:57:7d:d6:d9:ff:01:3d:7d:b6:41:7b:d8:ce:7c:
9c:15:65:59:39:35:5e:d5:99:2b:47:2d:6e:6c:18:53:0d:78:
77:2d:aa:3e:7f:2e:eb:21:63:4a:54:df:ba:ed:d5:53:23:2b:
fc:45:39:e3:9b:9f:67:93:03:69:be:73:6c:71:5e:ec:18:c5:
68:41:c7:74:57:b4:e5:06:c7:a5:c6:59:5a:0c:d6:61:5f:f5:
d2:7f:d6:5d:55:08:34:09:e5:be:b7:8f:8d:12:91:c8:e7:98:
ae:0c:83:af:3b:3c:ee:e0:be:58:2a:90:89:05:c4:1f:f2:5e:
6a:24:a2:15:dc:3f:4f:55:d2:88:55:66:40:d2:af:ce:1b:db:
c5:3d:59:0f:ae:47:69:0b:74:30:c1:e6:57:cd:dc:c5:61:6d:
5f:9b:b7:62:3a:21:4b:8f:b3:8f:76:3f:a0:81:bc:a2:33:6b:
01:2d:27:97:03:c0:de:5a:18:13:08:0e:a8:cc:46:e4:90:58:
9d:30:96:65:70:73:8f:20:7d:db:17:ac:97:09:04:4a:f2:8e:
2d:c4:92:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:24:14 2026 by rpki-client